$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152370.roa File: AS152370.roa (raw, json) Hash identifier: 6L9lJWMH5UIYK0GA4JVSVgRaAO8T9ltgYl6jSWvsVeQ= Subject key identifier: 47:CA:39:20:C2:D8:AE:46:CE:CB:5D:CA:3E:C0:A2:C6:7E:0B:CA:D1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 47CDD8DE5DFD326644A4EE85596FC933262BC8A1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152370.roa Signing time: Tue 30 Jun 2026 07:32:13 +0000 ROA not before: Tue 30 Jun 2026 07:27:13 +0000 ROA not after: Tue 29 Jun 2027 07:32:13 +0000 asID: 152370 IP address blocks: 103.56.144.0/24 maxlen: 24 103.215.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:cd:d8:de:5d:fd:32:66:44:a4:ee:85:59:6f:c9:33:26:2b:c8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 30 07:27:13 2026 GMT Not After : Jun 29 07:32:13 2027 GMT Subject: CN=47CA3920C2D8AE46CECB5DCA3EC0A2C67E0BCAD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:73:9d:84:56:f5:7e:19:57:2e:f3:b2:82:de: 80:86:63:ea:4c:ae:e3:3c:6d:ff:f3:ff:4c:09:af: a4:a9:3f:f9:f7:61:9e:0a:4c:fe:42:45:d4:c7:f6: ad:0f:85:6b:f0:87:45:2d:cf:02:01:0c:21:1d:47: 6f:27:53:6f:05:23:14:9c:1a:b5:c1:d4:29:85:be: 56:44:8a:4e:19:9a:a5:12:4e:db:e3:b1:64:7d:32: 31:d8:26:73:36:57:f7:9b:32:60:30:ab:b0:bf:35: 11:8e:33:99:09:7b:8c:5a:1c:c2:05:11:bf:ea:72: 09:3f:10:36:b8:97:36:a7:82:76:f5:0c:a6:ee:eb: e9:75:53:44:39:4b:e6:25:ab:71:68:d2:40:54:38: 85:bd:c1:f9:b5:39:8a:6d:1a:21:ab:35:09:a0:97: ef:8c:bb:4e:72:c1:c3:66:42:0f:9a:94:e1:3e:b4: c6:87:13:32:ca:5a:f6:5b:70:c2:cc:69:6d:5a:9b: 94:34:b1:44:9e:22:9b:9c:87:32:01:d0:59:9f:6b: 2d:b6:75:ff:4b:be:7d:d8:de:cc:1d:23:ca:3f:e1: e0:6f:0e:a8:c1:a0:68:c5:aa:44:86:3b:38:22:de: 21:67:2a:17:6a:0e:62:eb:25:3c:dc:fb:c2:5a:3c: 74:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CA:39:20:C2:D8:AE:46:CE:CB:5D:CA:3E:C0:A2:C6:7E:0B:CA:D1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152370.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.144.0/24 103.215.70.0/24 Signature Algorithm: sha256WithRSAEncryption 44:f3:b1:7f:52:7d:de:33:3c:87:e4:80:bb:57:dc:a4:da:3f: 02:62:9c:60:b8:a3:45:51:ff:4f:3c:8d:c0:b6:99:52:4c:a7: d4:9e:a9:cc:2a:36:b1:d4:a3:30:b0:37:8f:47:fd:04:14:54: a7:0f:33:4c:6b:75:fb:4c:18:05:61:e1:cd:ce:bb:8e:d2:78: 75:cf:b5:33:51:23:8f:59:89:01:a1:24:f2:7f:61:73:c5:ff: bd:4b:68:73:00:88:7a:fc:cc:e8:3f:16:2e:0e:a5:35:5b:ca: 44:72:78:0d:86:54:a6:a1:b5:03:ec:87:8b:92:3c:a3:c2:0c: 66:1b:99:c6:5b:1d:39:dc:fd:f4:8c:e3:9a:01:87:f0:a9:c3: 72:c5:79:1c:bb:c6:11:0e:55:1f:43:53:58:cb:d2:12:f8:43: f4:b9:ab:53:d8:70:17:17:34:40:45:fc:77:0d:2b:5c:e2:95: c8:c1:b6:d4:9c:6d:bc:7c:05:f1:72:f5:94:74:2a:92:8e:4c: 4e:75:c4:fd:8f:49:1c:f3:64:30:10:44:c3:d6:51:93:d2:5e: b3:d8:e2:40:19:f7:12:59:ac:ce:83:ac:a1:5c:52:46:57:39: c0:b3:87:74:02:b6:c4:b1:a4:40:21:15:19:8a:f0:10:e6:ce: 14:8b:6b:94 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUR83Y3l39MmZEpO6FWW/JMyYryKEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYzMDA3MjcxM1oX DTI3MDYyOTA3MzIxM1owMzExMC8GA1UEAxMoNDdDQTM5MjBDMkQ4QUU0NkNFQ0I1 RENBM0VDMEEyQzY3RTBCQ0FEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAONznYRW9X4ZVy7zsoLegIZj6kyu4zxt//P/TAmvpKk/+fdhngpM/kJF1Mf2 rQ+Fa/CHRS3PAgEMIR1HbydTbwUjFJwatcHUKYW+VkSKThmapRJO2+OxZH0yMdgm czZX95syYDCrsL81EY4zmQl7jFocwgURv+pyCT8QNriXNqeCdvUMpu7r6XVTRDlL 5iWrcWjSQFQ4hb3B+bU5im0aIas1CaCX74y7TnLBw2ZCD5qU4T60xocTMspa9ltw wsxpbVqblDSxRJ4im5yHMgHQWZ9rLbZ1/0u+fdjezB0jyj/h4G8OqMGgaMWqRIY7 OCLeIWcqF2oOYuslPNz7wlo8dPcCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBRHyjkg wtiuRs7LXco+wKLGfgvK0TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMzcwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAZziQAwQAZ9dGMA0GCSqGSIb3DQEBCwUAA4IBAQBE87F/Un3eMzyH5IC7 V9yk2j8CYpxguKNFUf9PPI3AtplSTKfUnqnMKjax1KMwsDePR/0EFFSnDzNMa3X7 TBgFYeHNzruO0nh1z7UzUSOPWYkBoSTyf2Fzxf+9S2hzAIh6/MzoPxYuDqU1W8pE cngNhlSmobUD7IeLkjyjwgxmG5nGWx053P30jOOaAYfwqcNyxXkcu8YRDlUfQ1NY y9IS+EP0uatT2HAXFzRARfx3DStc4pXIwbbUnG28fAXxcvWUdCqSjkxOdcT9j0kc 82QwEETD1lGT0l6z2OJAGfcSWazOg6yhXFJGVznAs4d0ArbEsaRAIRUZivAQ5s4U i2uU -----END CERTIFICATE-----Generated at Thu Jul 23 23:49:51 2026 by rpki-client